Cyber Security Risk Manager (m/f/d)
- Madrid
- Permanente
- Tiempo completo
- Provide support to Asset Owners and Risk Owners to facilitate the operationalization of Cyber Risk Management -related processes.
- Foster collaboration with our global Risk Community, by actively gathering their feedback, while effectively communicating updates and enhancements to ensure alignment and engagement.
- Provide awareness materials and moderate training sessions on Cyber Security Risk Management to promote continuous learning and compliance towards BASF Business Units.
- Derive new processes or pilots to strengthen GRC in response to the evolving threat landscape.
- Conduct research on new threats by leveraging different sources such as Google Threat Intelligence or Dragos
- Execute strategic risk assessments on-demand to identify and evaluate emerging risks that could negatively affect or harm BASF
- Maintain and improve the toolset that our team provides (RSA Archer, Power BI, Knowledge Base within SharePoint)
- Aggregate operational risks and translate asset-specific risks to generic risk scenarios on enterprise level to support senior management reporting and strategic as well as tactical decision-making.
- Support the lifecycle update of group-wide cyber security governance regulations based on generic BASF risk landscape.
- Work closely with cross-functional teams to support compliance of risk management processes with ISMS according to ISO 27001 and other relevant regulations.
- Collaborate with Asset Owners and Risk Owners to maintain a risk register and associated risk treatment plans up to date
- Monitor and report on the effectiveness of risk management controls and support the reporting of significant risks to senior management
- University degree in computer science, Information Technology, or a related field
- Experience with developing, implementing, and maintaining an ISMS based on ISO 27001 or other relevant standards
- Profound experience in cyber security, particularly in GRC and cyber security risk management
- Strong understanding of risk management principles, frameworks and practices, especially in the field of risk aggregation as well as definition and evaluation of generic risks on enterprise level
- Experience with risk assessments, cyber threats and vulnerabilities
- Knowledge of relevant laws and regulations related to cyber security
- Excellent communication and interpersonal skills, with the ability to work effectively with internal team members and cross-functional teams Internal
- Relevant certifications such as CISSP, CISM, CRISC are a plus
- A secure work environment because your health, safety and wellbeing is always our top priority.
- Flexible work schedule and Home-office options, so that you can balance your working life and private life.
- Learning and development opportunities
- 23 holiday days per year
- 5 additional days (readjustment)
- 2 cultural days
- A collaborative, trustful and innovative work environment
- Being part of an international team and work in global projects
- Relocation assistance to Madrid provided